Privacy policy

Last updated: November 5, 2026

This Privacy Policy explains how Lymphoa Group LLC, a Wyoming limited liability company doing business as Oakpaw ("Oakpaw," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit oak-paw.com, buy our products, join The Paw Club, open our emails, or contact us (together, the "Services").

If you have questions, contact us at support@oak-paw.com or at the address in Section 15.

Quick summary

  • We collect what we need to sell and deliver your purchases, run your Paw Club membership, bill you, prevent fraud, and keep records that prove what you agreed to.
  • We never see or store your full card number. Payments are processed by our payment processor, Paysight.
  • We use cookies and similar tools for the website to work, for analytics, and for advertising. You can opt out of advertising cookies at any time (Section 8).
  • We do not sell your personal information for money. Some advertising cookies may count as "sharing" or "targeted advertising" under certain state laws. You can opt out (Section 10).
  • Residents of many U.S. states have privacy rights. We honor these rights for all U.S. customers, whatever state you live in (Section 10).

1. Information we collect

1.1 Information you give us

  • Contact and account details: name, email address, phone number (optional), billing address, and shipping address (for physical products), account password (stored in hashed form).
  • Order details: products purchased, prices, discounts, order number, date and time.
  • Paw Club details: trial start date, membership status, billing dates, cancellation requests and confirmations.
  • Payment details: you enter your card details directly in the payment form operated by Paysight. We receive only limited data from Paysight, such as card brand, the last four digits, expiration date, the issuing country, and the results of address and security code checks. We do not receive or store your full card number or security code.
  • Communications: emails and messages you send us, survey answers, and reviews.
  • Information about your dog (optional): for example breed, age, weight, or dietary needs, if you choose to tell us.

1.2 Information we collect automatically

  • Device and connection data: IP address, browser type and version, operating system, device type, screen size, language, time zone, and device identifiers.
  • Usage data: pages viewed, buttons clicked, the referring page, date and time of each visit, and similar activity on our website and checkout.
  • Consent records: when you buy or join The Paw Club, we record what you agreed to, including the exact text shown to you, the state of any checkbox, the button you clicked, the date and time, your IP address, and your device and browser data.
  • Delivery records: We keep a record of your order, the email we sent your download links to, and the time it was sent.
  • Email data: whether our emails were delivered, opened, or clicked.
  • Cookies and similar technologies: see Section 8.

1.3 Information from third parties

  • Payment processor and banks: payment status, fraud screening results, and information about refunds, payment disputes, and chargebacks.
  • Fraud-prevention and dispute-alert services: alerts and information that card networks or issuing banks share with us about a disputed transaction.
  • Advertising and analytics partners: information about how you found us (for example, which ad you clicked).

2. How we use your information

We use personal information to:

  1. Process and deliver your orders, including sending download links for digital files, shipping physical products, tracking deliveries, and handling returns.
  2. Run your Paw Club membership, including starting your free trial, giving you access to the Member Library, charging the recurring membership fee you agreed to, and processing cancellations.
  3. Send transactional messages that are part of your purchase or membership, such as order confirmations, download links, membership confirmations, trial reminders, receipts, payment failure notices, price change notices, and cancellation confirmations. These messages are required to provide the Services and are sent even if you unsubscribe from marketing emails.
  4. Provide customer support and respond to your requests.
  5. Prevent fraud and abuse, for example to detect stolen cards, repeated free trials, or account sharing.
  6. Keep records of your consent and of our delivery, and use them to respond to payment disputes and chargebacks, to protect our legal rights, and to meet legal and card network requirements.
  7. Send marketing emails about new recipes, products, and offers, where permitted by law (see Section 9).
  8. Analyze and improve our website, checkout, products, and services.
  9. Advertise our products, including measuring how well our ads work.
  10. Comply with the law and with requests from authorities.

3. How we disclose your information

We disclose personal information only as described here:

  • Service providers that act on our behalf and are bound by contract to protect your information, including:
    • our e-commerce platform and website hosting provider;
    • Paysight, our payment processor, and the banks and payment networks involved in processing your payment;
    • our email delivery and customer messaging provider;
    • our email and cloud productivity provider;
    • our fulfillment partner and shipping carriers, which receive your name, shipping address, phone number (if provided), and order details to deliver physical products;
    • fraud-prevention, chargeback-alert, and dispute-resolution providers;
    • analytics providers.
  • Card networks and banks for charge inquiries and payment disputes. If you ask your bank or card issuer about a charge from us, or dispute it, we may provide the issuer, the card network (for example Visa or Mastercard), our payment processor, and their dispute service providers with records about your transaction. These records can include your name, email, order history, IP address, device and browser data, the consent record from checkout or sign-up, the emails we sent you and their delivery status, and the record of when we sent your download links. Some of these details (for example the merchant name, order description, and receipt) may also be shown to you in your banking app or to your bank's customer service through services operated by the card networks.
  • Advertising partners that place cookies or similar tools on our website (see Sections 8 and 10).
  • Legal and safety reasons: to comply with law, a court order, or a request from a government authority; to enforce our Terms of Service; or to protect the rights, property, or safety of Oakpaw, our customers, or others.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this Privacy Policy.
  • With your direction or consent.

4. Payment information

Payments, including recurring Paw Club charges, are processed by Paysight. When you enter your card details, they go directly to Paysight. Paysight stores your card securely so that we can charge the recurring membership fee you authorized and any additional purchase you confirm. Paysight's handling of your payment information is governed by its own privacy policy. We receive only the limited payment data described in Section 1.1.

5. How long we keep information

We keep personal information only as long as needed for the purposes in this policy, including:

Type of information How long we keep it
Order, billing, and payment records At least 7 years (tax and accounting)
Consent records (text shown, checkbox, click, time, IP, device) For the life of your account and at least 3 years after your membership ends, or longer if a dispute or legal claim is pending
Delivery records (your order, the email we sent your download links to, and the time it was sent) For the life of your account and at least 3 years after your last purchase or membership ends
Emails we sent you and their delivery status For the life of your account and at least 3 years after your membership ends
Support communications 3 years after the last contact
Marketing preferences Until you unsubscribe, then only a record of the opt-out
Analytics and advertising cookie data According to the settings of each tool, usually up to 2 years

We may keep information longer where the law requires it or where it is needed to resolve a dispute, chargeback, or legal claim.

6. How we protect information

We use reasonable administrative, technical, and physical safeguards, including encrypted connections (HTTPS), access controls, and payment processing through a PCI-compliant provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Children

Our Services are intended for adults. You must be at least 18 years old to make a purchase or join The Paw Club. We do not knowingly collect personal information from children under 13. We do not knowingly sell or share personal information of consumers under 16. If you believe a child has given us personal information, contact us and we will delete it.

8. Cookies and tracking technologies

We and our partners use cookies, pixels, tags, local storage, and similar technologies:

  • Strictly necessary: to run the website, keep your cart, process checkout, keep you signed in, and prevent fraud. These cannot be turned off.
  • Analytics: to understand how visitors use our website so we can improve it.
  • Advertising: to show you Oakpaw ads on other websites and apps, and to measure whether our ads lead to visits and purchases. These tools may collect your IP address, device identifiers, and activity on our website and share it with advertising platforms.

Your choices:

  • Use the cookie settings on our website or the "Your Privacy Choices" link in the footer to turn off analytics and advertising cookies.
  • Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser.
  • You can also block or delete cookies in your browser settings. Some parts of the website may not work without necessary cookies.
  • Some browsers send "Do Not Track" signals. Because there is no common standard for them, we respond to GPC instead.

9. Email marketing

If you buy from us or sign up for our emails, we may send you marketing emails about recipes, products, and offers. You can unsubscribe at any time with the link at the bottom of every marketing email or by emailing support@oak-paw.com. Unsubscribing from marketing does not stop transactional messages about your orders and membership (Section 2, item 3).

We do not currently send marketing text messages. If we offer text messages in the future, we will ask for your separate consent first.

10. Your U.S. state privacy rights

Residents of several U.S. states, including California (CCPA as amended by the CPRA), Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, have rights over their personal information. We extend these rights to all customers in the United States.

10.1 Your rights

Depending on your state, you have the right to:

  • Know and access the personal information we have about you, including the categories and specific pieces of information;
  • Correct inaccurate personal information;
  • Delete personal information we collected from you, subject to legal exceptions (for example, we must keep billing and consent records as described in Section 5);
  • Get a copy of your personal information in a portable format;
  • Opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects (we do not engage in such profiling);
  • Not be discriminated against for exercising your rights;
  • Appeal our decision on your request.

10.2 Sale, sharing, and targeted advertising

We do not sell personal information for money. However, when advertising cookies and pixels on our website send information about your visit to advertising partners, this may be considered a "sale," "sharing," or "targeted advertising" under some state laws. In the past 12 months, the categories involved were identifiers (such as IP address and cookie or device IDs) and internet activity (such as pages viewed and purchases), disclosed to advertising and analytics partners. To opt out, use the "Your Privacy Choices" link in our website footer or turn on Global Privacy Control in your browser.

10.3 Sensitive personal information

We do not use or disclose sensitive personal information for purposes that would give California residents the right to limit its use. We do not receive your full card number.

10.4 How to make a request

  • Email support@oak-paw.com with the subject line "Privacy Request," or write to us at the address in Section 15.
  • Tell us which right you want to use and the email address you used with us.
  • Verification: To protect your information, we will verify your request by matching information you give us (for example, your email address and an order number) with our records. We may ask for more information if needed.
  • Authorized agents: You may use an authorized agent. We may ask the agent for proof of your written permission and may ask you to verify your identity directly.
  • Timing: We respond within 45 days. If we need more time (up to 45 more days, where permitted), we will tell you why.
  • Appeals: If we decline your request, you can appeal by replying to our decision with the subject line "Privacy Appeal." We will respond within the time required by your state's law. If you are not satisfied, you may contact your state Attorney General.

10.5 California notice at collection (categories in the last 12 months)

Category (CCPA) Examples Purposes Disclosed to Sold or shared?
Identifiers Name, email, address, IP address, order number, device and cookie IDs Orders, membership, support, fraud prevention, disputes, marketing, advertising Service providers; card networks and banks in disputes; advertising partners (cookie IDs, IP) Shared (cookie IDs and IP for advertising only)
Customer records (Cal. Civ. Code § 1798.80) Name, billing address, phone, limited card data (brand, last 4) Orders, billing, disputes Service providers; payment processor; card networks and banks in disputes No
Commercial information Products bought, membership status, billing history Orders, membership, billing, analytics, disputes Service providers; card networks and banks in disputes Shared (purchase events for ad measurement)
Internet or network activity Pages viewed, clicks, consent records, email opens Website operation, analytics, fraud prevention, disputes, advertising Service providers; card networks and banks in disputes; advertising partners Shared (website activity for advertising)
Geolocation (approximate) Location derived from IP address Fraud prevention, taxes, analytics Service providers No
Audio or electronic information Content of support emails Customer support, disputes Service providers No
Inferences Product preferences Marketing and recommendations Service providers No

Retention periods are listed in Section 5.

10.6 Other California rights

Shine the Light (Cal. Civ. Code § 1798.83): We do not disclose personal information to third parties for their own direct marketing purposes.

10.7 Nevada

We do not sell covered information as defined under Nevada law. You may still send an opt-out request to support@oak-paw.com.

11. Payment disputes and fraud prevention

To protect customers and our business from fraud and unauthorized charges, we keep and use the records described in Sections 1.2 and 5. If a transaction is disputed, we may share those records with your card issuer, the card networks, Paysight, and dispute-resolution providers (Section 3). This processing is necessary for our legitimate business purposes and to comply with card network rules.

12. Third-party links and services

Our website may link to websites or services we do not control. Their privacy practices are governed by their own policies.

13. Where we process information

We are based in the United States, and we process and store information in the United States. If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the "Last updated" date. If we make material changes, we will notify you by email or with a notice on our website before the changes take effect.

15. Contact us

Lymphoa Group LLC (Oakpaw) 30 N Gould St Ste N Sheridan, WY 82801 United States

Email: support@oak-paw.com Phone: +1 (307) 302-4806